How MSPs Can Explain the Business Value of Cybersecurity
Summary
The article advises MSPs to tailor cybersecurity discussions to stakeholders, use annual risk assessments and downtime-cost estimates to make risks tangible, and pair findings with remediation plans and regular reviews.
Key points
- Adapt cybersecurity messaging to stakeholders’ roles and business goals, from executive concerns about risk and revenue to managers’ concerns about usability and operational disruption.
- Use annual risk assessments to establish current risks and identify how outages could affect business operations.
- Estimate potential downtime costs: the article’s example calculates that five days offline could cost a 30-person, $4 million-a-year business about $100,000 in revenue.
- Help clients determine mean time to recovery and translate downtime into financial impact, while acknowledging reputational and employee-retention effects.
- Pair identified risks with remediation options that fit the client’s size and budget; the article gives MFA and SASE as examples for small offices.
- Use regular strategic reviews to track risk-assessment improvements and communicate the value of cybersecurity investments.
Article Details
- Topic
- Communicating the business value of cybersecurity through risk assessments, downtime-cost calculations, remediation planning, and regular QBRs.
People
Products
Huntress platformGrowing your client base and simplifying your marketing efforts isn’t easy. But the Huntress platform was built with MSPs in mind to help you succeed at both (and more!)Microsoft 365 Apps for EnterpriseOur platform combines a suite of powerful managed detection and response tools for endpoints and Microsoft 365 identities, science-backed security awareness training, and the expertise of our 24/7 Security Operations